$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/6807307655CEA502796E1026C663C4A882D37E72.cer File: 6807307655CEA502796E1026C663C4A882D37E72.cer (raw, json) Hash identifier: 8P7MtGe/fzf3lKiWRuuIwtJfNf7dWDlIZbXUN5ZHGjE= Subject key identifier: 68:07:30:76:55:CE:A5:02:79:6E:10:26:C6:63:C4:A8:82:D3:7E:72 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 539E269C974533AFF5FA6F56E957C30BE877951C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft caRepository: rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:21:36 +0000 Certificate not after: Sun 02 May 2027 01:26:36 +0000 Subordinate resources: IP: 203.33.35.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:9e:26:9c:97:45:33:af:f5:fa:6f:56:e9:57:c3:0b:e8:77:95:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:21:36 2026 GMT Not After : May 2 01:26:36 2027 GMT Subject: CN=6807307655CEA502796E1026C663C4A882D37E72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0c:f5:cc:30:d4:e6:a2:74:e6:e5:b4:47:5f: e3:be:2f:5f:c3:06:09:84:fb:06:12:e0:53:46:ce: b5:9e:92:77:e6:74:c8:88:68:4b:5d:0b:92:c6:a2: 64:2a:da:b6:86:68:14:cf:36:e1:8a:35:d7:36:ba: 2b:1c:1b:92:96:66:ab:35:29:a2:6a:42:dc:10:53: 5a:b9:51:4d:ff:a2:ad:e0:cb:4f:90:ab:f4:59:41: 68:75:b1:9b:03:cb:aa:3d:bb:29:80:7e:a6:09:c5: 62:77:bc:da:99:df:1a:fe:50:93:9d:cf:5f:0d:ec: 10:33:90:6b:35:3d:5d:cc:36:59:40:7d:a0:f7:79: ad:10:14:52:ae:10:ce:88:3e:64:60:e7:d2:8a:6e: 22:8e:ac:d7:5a:a4:fc:62:2b:9c:0e:e0:81:29:11: 54:a1:7f:67:06:87:ec:21:dc:76:2f:09:2e:b0:2e: 83:cc:bd:b4:9f:dd:fc:f6:48:07:5d:7d:63:b2:c1: 4e:64:38:04:9c:b7:b3:98:ad:e4:17:fc:6b:68:eb: 0b:06:f1:3a:d4:ad:88:49:05:49:23:ec:ca:69:16: 27:61:55:3f:de:9f:7c:c7:ee:49:b3:f8:26:f5:15: df:73:5f:f0:56:a6:38:5a:e0:e5:97:64:a4:b3:e7: 58:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:07:30:76:55:CE:A5:02:79:6E:10:26:C6:63:C4:A8:82:D3:7E:72 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.33.35.0/24 Signature Algorithm: sha256WithRSAEncryption 40:91:f9:7a:31:38:a3:42:40:fc:7f:86:1e:f6:b0:ec:2f:b8: 6f:77:69:5d:6c:0c:07:e6:78:a6:d3:35:56:4d:c7:95:07:ce: 5d:d4:ea:fa:1b:5f:09:ba:25:36:c3:69:02:2b:55:1e:95:1c: 11:f8:65:79:eb:13:b2:b5:57:57:d8:24:3c:d3:59:6e:55:ad: fe:03:91:5e:07:30:e8:65:27:39:2f:1c:3d:ca:7a:1f:b5:0a: d9:a2:d3:c8:8e:64:19:aa:8e:f5:60:1c:c3:54:ab:44:81:3b: 21:c2:1e:fb:31:a1:51:fa:6e:ee:83:eb:e1:90:3c:f8:fc:99: 0b:62:59:a1:8b:e8:06:de:10:57:59:d6:19:a9:82:01:48:2b: 12:ca:1d:8c:f1:94:0e:82:ae:9e:df:2b:81:c6:7b:24:89:8f: 62:5a:dc:ef:d0:b2:c8:5f:89:37:ae:10:48:00:8a:bf:e6:82: eb:25:c9:c9:78:07:1f:e1:4f:e8:2a:19:24:ce:1d:f0:82:81: da:b2:89:4e:74:4c:ea:c6:10:f4:7a:a7:0f:71:b7:e9:c9:35: 76:be:95:24:5b:a7:18:d8:8e:16:d8:09:27:d3:52:f3:80:21: 8e:27:94:d6:61:f0:63:12:0e:98:fe:b9:33:cc:29:84:56:41: 5d:dc:0e:e6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUU54mnJdFM6/1+m9W6VfDC+h3lRwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjEzNloX DTI3MDUwMjAxMjYzNlowMzExMC8GA1UEAxMoNjgwNzMwNzY1NUNFQTUwMjc5NkUx MDI2QzY2M0M0QTg4MkQzN0U3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQM9cww1OaidObltEdf474vX8MGCYT7BhLgU0bOtZ6Sd+Z0yIhoS10Lksai ZCratoZoFM824Yo11za6KxwbkpZmqzUpompC3BBTWrlRTf+ireDLT5Cr9FlBaHWx mwPLqj27KYB+pgnFYne82pnfGv5Qk53PXw3sEDOQazU9Xcw2WUB9oPd5rRAUUq4Q zog+ZGDn0opuIo6s11qk/GIrnA7ggSkRVKF/ZwaH7CHcdi8JLrAug8y9tJ/d/PZI B119Y7LBTmQ4BJy3s5it5Bf8a2jrCwbxOtStiEkFSSPsymkWJ2FVP96ffMfuSbP4 JvUV33Nf8FamOFrg5ZdkpLPnWB0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGgHMHZVzqUCeW4QJsZjxKiC035yMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk4ZTQ2MTBhLWE3OTQtNDA1OS05N2Q5LWYyYzY5ZGE1NGM4Yi8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85OGU0NjEw YS1hNzk0LTQwNTktOTdkOS1mMmM2OWRhNTRjOGIvMS82ODA3MzA3NjU1Q0VBNTAy Nzk2RTEwMjZDNjYzQzRBODgyRDM3RTcyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAyyEjMA0GCSqGSIb3DQEBCwUAA4IBAQBAkfl6MTijQkD8f4Ye9rDsL7hvd2ld bAwH5nim0zVWTceVB85d1Or6G18JuiU2w2kCK1UelRwR+GV56xOytVdX2CQ801lu Va3+A5FeBzDoZSc5Lxw9ynoftQrZotPIjmQZqo71YBzDVKtEgTshwh77MaFR+m7u g+vhkDz4/JkLYlmhi+gG3hBXWdYZqYIBSCsSyh2M8ZQOgq6e3yuBxnskiY9iWtzv 0LLIX4k3rhBIAIq/5oLrJcnJeAcf4U/oKhkkzh3wgoHasolOdEzqxhD0eqcPcbfp yTV2vpUkW6cY2I4W2Akn01LzgCGOJ5TWYfBjEg6Y/rkzzCmEVkFd3A7m -----END CERTIFICATE-----Generated at Tue May 12 22:16:31 2026 by rpki-client